Switch XGS4600 Series - V4.70 Patch 5 Firmware Release

Zyxel_Melen · January 20

Zyxel Switch XGS4600 Series Release Note

January 2025

Firmware Version on all models

(Click Hyperlink to download the firmware directly)

Zyxel XGS4600-52F - V4.70(ABIK.5)C0

Zyxel XGS4600-32F - V4.70(ABBI.5)C0

Zyxel XGS4600-32 - V4.70(ABBH.5)C0

New Feature and Enhancements

1. Enhance security by forcing users to change the password after first login.

2. Expand NTP servers from 1 to 3.

3. Enhance security by supporting the ECDSA algorithm in SSH.

Bug Fix

1. [eITS#220900092] Fixed OpenSSH related vulnerabilities. [CVE-2010- 5107][CVE2015-5600][CVE-2016-6515].

2. [eITS#221001400] If the MAC address limit of port-security has reached, the port still cannot learn any MAC address after any link reset related (ex. port test, cable, diagnostic, or physical link up/down).

3. [eITS#221100146] LACP configuration may leads switch not handle the 802.1x authentication.

4. [eITS#221101240] Fix recording syslog may cause memory leak.

5. [eITS#221101132] After restoring config via SFTP may cause fail due to syntax error.

6. Fixed crash issue when receive an unexpected HTTPs request content.

7. [eITS#221201201] Getting logging information that contains special characters causes switch hang.

8. [eITS#230301533] Fixed reading mib zyxelIpsgInfoTable fail.

9. [eITS#230301330] Fixed failing to import certificate while the file size is over 5k.

10. [eITS#230400140] [eITS#231000816] Fixed switch crashed issues that is caused by Nessus version 10.5.1 to scan SSH.

11. [eITS#230400154] Fixed failing to delete inactive classifiers even though they are not bound to any policies.

12. The fixed policy route does not adhere to the configured VID setting.

13. Fixed incorrect swif0 interface counter in standard IfEntry MIB.

14. [eITS#230801140] Fixed crash issue when enabling IPv6 and receiving an IPv6 NA packet.

15. Fixed switch crash issue caused by receiving LLDP packets with over chassis ID lengths.

16. [eITS#231001888] Fixed fail to add policy rule issue when binding the second classifier containing the same socket range as the first one

17. [eITS#240100009] Fixed memory leak issue causing packet switching failure when the switch configures a non-existent IPv6 gateway and receives numerous unknown IPv6 packets.

18. [eITS#231201249] Fixed switch may reboot automatically when receiving IPv6 packets.

19. [eITS#240401365] Switch web GUI should not allow setting different media types on link aggregation ports.

20. [eITS#240300246] The switch hangs when an IPv6 client roams.

21. [eITS#240501702] Fixed device IP address and uplink usage are not displayed correctly on Nebula.

22. [eITS#240601476] Continuously collecting the tech support file may cause the device to crash.

23. [eITS#240801076] Using SNMPwalk to query the Q-Bridge MIB will return incorrect values when voice VLAN is enabled on the device.

24. [eITS#240801706] Fixed the client could not obtain an IP address if the same IP address was configured in the IPSG static binding table.

25. [eITS#241001395] IPSG with IPv6 has lease time of only 10 seconds.

26. [eITS#241100538] Fix special characters(space,' ,") can be allowed in username to cause configuration error.

27. [eITS#241100288] MSTP root guard cannot prevent the RSTP Superior SW from preempting the Root.

28. [eITS#220500960] Disabling 802.1x or guest VLAN functionality on other ports will cause the authenticated clients to disconnect and require re-authentication.

Please refer to the Download Link for more details.